[pve-devel] [PATCH v3 access-control/cluster/manager 0/5] auth key rotation

Fabian Gr├╝nbichler f.gruenbichler at proxmox.com
Wed Mar 13 15:01:29 CET 2019


changes since v2:
- clean up error handling for calls to cfs_lock_authkey
- disable rotation until PVE 6.0
- add posinst for smoother upgrading once rotation gets enabled

changes since v1:
- add rotation in pvestatd
- accept tickets signed with current key if cluster is not quorate (no rotation possible)
- rotate once every 24h



More information about the pve-devel mailing list